Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/f54692-2d4b-41d4-b03c-38526ae48451/1/XD3T7TaYVr-I8X2imNPDFcl1bsU.roa
File: XD3T7TaYVr-I8X2imNPDFcl1bsU.roa (raw, json)
Hash identifier: A2nJG2K/w6lI26ccO4bOVdeKacJLdXZ9NZaktfoPmwI=
Subject key identifier: 5C:3D:D3:ED:36:98:56:BF:88:F1:7D:A2:98:D3:C3:15:C9:75:6E:C5
Certificate issuer: /CN=56e3e8f13bc60fd6851dd705f327ca2aa8247739
Certificate serial: 018CC649FD6DC875B3B845872A0AF11019B8
Authority key identifier: 56:E3:E8:F1:3B:C6:0F:D6:85:1D:D7:05:F3:27:CA:2A:A8:24:77:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VuPo8TvGD9aFHdcF8yfKKqgkdzk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/f54692-2d4b-41d4-b03c-38526ae48451/1/XD3T7TaYVr-I8X2imNPDFcl1bsU.roa
Signing time: Mon 01 Jan 2024 18:29:46 +0000
ROA not before: Mon 01 Jan 2024 18:29:46 +0000
ROA not after: Tue 01 Jul 2025 00:00:00 +0000
asID: 8930
IP address blocks: 194.102.243.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c6:49:fd:6d:c8:75:b3:b8:45:87:2a:0a:f1:10:19:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56e3e8f13bc60fd6851dd705f327ca2aa8247739
Validity
Not Before: Jan 1 18:29:46 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=5c3dd3ed369856bf88f17da298d3c315c9756ec5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:e8:bd:94:01:d4:c0:28:46:47:ba:51:56:63:
23:46:4d:eb:a3:90:2e:fe:ed:56:5d:5a:be:d2:77:
df:d4:f2:ac:8c:50:c6:71:1d:f7:9e:c6:53:c1:c5:
44:9f:f8:a8:86:87:ef:45:41:e1:ad:24:4d:e9:8b:
f6:0f:21:4d:5b:9f:df:22:00:a9:8d:a1:38:46:21:
43:9c:6f:68:76:51:c6:00:5c:6d:ee:a1:5c:1f:b0:
b5:eb:0a:0b:40:fd:d3:1e:dc:7a:56:40:b0:cb:fa:
70:f0:96:15:18:31:bd:2e:47:5e:59:05:76:56:a2:
66:bc:df:0e:8b:55:65:32:53:11:ef:c8:fd:45:9a:
3b:06:35:41:8b:03:38:7b:e6:1e:dc:d9:b0:3d:47:
c1:b7:4f:cb:38:5c:00:f7:65:dd:e4:0b:e9:e7:e4:
b9:27:49:d5:6c:ce:a2:dd:58:3f:17:cf:46:7b:1d:
45:fa:fd:2c:6b:fd:8b:89:25:bd:7f:7b:ae:2b:42:
95:8e:f4:19:6f:70:38:0b:bf:98:cd:cc:fb:3a:4d:
32:12:29:2d:c8:5f:ee:2a:fb:85:a5:6e:92:88:9a:
f1:de:8d:4b:e1:7a:c4:db:d2:ce:ba:10:70:60:92:
61:fd:db:d5:10:86:e1:ba:ac:8e:b6:ee:84:36:67:
18:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:3D:D3:ED:36:98:56:BF:88:F1:7D:A2:98:D3:C3:15:C9:75:6E:C5
X509v3 Authority Key Identifier:
keyid:56:E3:E8:F1:3B:C6:0F:D6:85:1D:D7:05:F3:27:CA:2A:A8:24:77:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VuPo8TvGD9aFHdcF8yfKKqgkdzk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f54692-2d4b-41d4-b03c-38526ae48451/1/XD3T7TaYVr-I8X2imNPDFcl1bsU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/f54692-2d4b-41d4-b03c-38526ae48451/1/VuPo8TvGD9aFHdcF8yfKKqgkdzk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.102.243.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:30:18:b5:0a:4d:96:67:8f:d4:3c:02:49:a5:de:fe:3d:e6:
fe:0b:b7:ad:eb:5e:55:d1:78:23:13:71:63:01:b1:f7:32:79:
80:6d:35:5c:7a:22:08:db:60:5f:5b:08:08:9c:37:f5:f7:91:
f5:d2:a7:e2:d2:c8:34:f1:f5:54:f4:7b:0f:79:db:24:db:30:
b0:84:44:f8:80:f8:36:2b:da:ee:03:dd:56:47:34:be:f7:9c:
d1:39:9b:15:4f:c2:26:c8:e1:0a:b2:7e:d3:e2:dc:5c:73:b7:
18:90:43:a9:ec:e8:f4:1c:fc:e8:2c:6e:a5:12:d1:7b:f6:df:
02:8b:63:9f:7d:2a:1e:e1:83:b3:b3:ad:82:9a:54:5d:bf:26:
06:81:7b:12:b8:a0:c0:de:20:24:10:47:89:be:f5:55:c7:b3:
b1:01:4f:ec:46:f1:47:b0:5d:46:cb:b5:3d:2b:52:29:9e:5a:
03:48:5b:1c:26:c6:84:81:fe:f5:8c:d5:9e:ef:16:88:0d:63:
58:5e:11:a6:9e:28:1c:a6:7e:3c:27:c9:c7:66:5e:9a:73:b0:
36:b7:f0:24:a8:18:d7:96:fd:e6:29:99:90:1b:52:73:3f:df:
50:20:d3:ec:40:b4:d2:db:67:3f:9f:9a:24:38:81:dc:58:d3:
ef:73:0d:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:29:17 2024 by rpki-client on console-fra.rpki-client.org